download
getidex
skipcomponents
Static task
static1
Behavioral task
behavioral1
Sample
f5141030f812336b88f11399f9a0f75b_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5141030f812336b88f11399f9a0f75b_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
f5141030f812336b88f11399f9a0f75b_JaffaCakes118
Size
23KB
MD5
f5141030f812336b88f11399f9a0f75b
SHA1
e8464738598a07a30a8c06dd2eabb509a8ceacd6
SHA256
a0ab315b3206d721951b6885901de575102fdca9c792b4612824387f905b0d2b
SHA512
0162b82118d204d482843ab6e46c575bf72707d8c299389d1d8147e4725082c59951263e271e0982983a62090614ddbe67af74e322e83f4a51a3c12b21611651
SSDEEP
384:/MQCGjliR6HDngQCLOjDPzVRXxR6t7zMKyc2kDLJheDHjmPLW46J+vzh/IH:/MQkKxCLOjLzLXxRZHknaDHjmPS46J++
Checks for missing Authenticode signature.
resource |
---|
f5141030f812336b88f11399f9a0f75b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetWindowsDirectoryA
GetCurrentDirectoryA
WriteFile
GetProcAddress
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
GetTempFileNameA
GetTempPathA
MulDiv
GetTickCount
CloseHandle
ReadFile
CreateFileA
DeleteFileA
PulseEvent
WaitForSingleObject
CreateEventA
SetFilePointer
GetModuleFileNameA
InterlockedExchange
RtlUnwind
SetEvent
lstrlenA
CreateProcessA
GetLastError
GlobalAlloc
lstrcpynA
VirtualQuery
lstrcpyA
WaitForMultipleObjects
GlobalFree
SetWindowLongA
RegisterWindowMessageA
SetDlgItemTextA
MessageBoxA
wsprintfA
SendMessageA
FindWindowExA
AnyPopup
CallWindowProcA
DestroyWindow
CharLowerBuffA
EnableWindow
GetWindowLongA
CreateWindowExA
GetWindowRect
GetDlgItem
GetFocus
IsWindowVisible
ShowWindow
GetClientRect
SetWindowTextA
RegCloseKey
RegOpenKeyA
RegSetValueExA
RegEnumValueA
RegQueryValueExA
InternetConnectA
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetSetFilePointer
InternetCrackUrlA
FindCloseUrlCache
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
HttpOpenRequestA
HttpSendRequestA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
download
getidex
skipcomponents
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ